Add an option to disable IP masquerading

For the cases where --bip option is used it is sometimes best to disable IP masquerading as the provided bridge IP range may be routable.
You don't need the `#ip-masq` here.  `#` is only used when we deprecate a flag